Security & compliance
How Dropvik protects the files you send — and the people you send them to.
Hosted in the EU
Files and databases live in Hetzner data centres in Germany. Your data does not leave the European Union.
Encrypted in transit
Every page, upload and download uses HTTPS (TLS 1.2+). Download links to storage are signed and expire after minutes.
Optional end-to-end encryption
With end-to-end encryption, files are encrypted with AES-256-GCM in your browser. The key stays in the link — our servers never see the contents.
Virus and content scanning
Uploads are scanned with ClamAV; executable files are flagged on the download page. Abuse reports are reviewed by a person.
Access control
Password-protected links with brute-force lockout, self-destructing transfers, download limits and expiry dates.
Account security
Two-factor authentication (teams can require it), a list of signed-in devices you can sign out remotely, and an exportable activity log.
Backups and retention
Nightly backups to separate storage, tested restores. Expired transfers are deleted automatically after their retention period.
Monitoring
Automated health checks every five minutes and a public status page with 90 days of history.
GDPR and KVKK
We process personal data only to deliver the service, as a data processor for the files you upload. You can download all your data or delete your account at any time from your account page.